Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File:                     tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier:          e6piIV7oY/u6mV6eylMcgtgA64rR8hZ6/n3oYhO8CCU=
Subject key identifier:   4A:1E:6C:FC:82:1D:3D:27:CE:7E:9D:0A:51:96:E7:09:6A:42:B0:9D
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer:       /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial:       019DA4C1E9523498203F1E416F40B847DC36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number:          18C6
Signing time:             Sun 19 Apr 2026 08:01:04 +0000
Manifest this update:     Sun 19 Apr 2026 08:01:04 +0000
Manifest next update:     Mon 20 Apr 2026 08:01:04 +0000
Files and hashes:         1: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: jimN9YohgORz3s3v9QJu4FA/GNAq1E/6QJeTRdL2h98=)
                          2: wDBsp0oyWdkjKRu9iS_gOT-BaX4.roa (hash: H0RPzwCZ2+V4qfg0rKJ99HJsmkWUJLpB08RH50xwdYk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:c1:e9:52:34:98:20:3f:1e:41:6f:40:b8:47:dc:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
        Validity
            Not Before: Apr 19 08:01:04 2026 GMT
            Not After : Apr 20 08:01:04 2026 GMT
        Subject: CN=4a1e6cfc821d3d27ce7e9d0a5196e7096a42b09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:df:ba:4d:5d:4c:6b:fd:93:4b:4b:b5:c2:c8:
                    94:9b:86:2b:83:78:d7:bc:b0:ed:92:93:a7:10:aa:
                    0c:50:47:c9:9c:7f:6f:13:fc:b5:fa:06:1a:af:33:
                    8e:ee:e4:97:9e:fb:23:33:d7:73:80:12:7e:b0:36:
                    f5:3f:8f:4a:69:ea:ae:01:23:85:61:0b:33:f9:25:
                    d5:05:c8:26:17:eb:c2:1a:a9:5d:4e:4d:d5:c2:9f:
                    b2:60:ba:60:6a:bc:e0:85:6e:d8:43:cb:72:97:7e:
                    1f:67:c5:8e:a8:1b:98:a1:c4:a7:85:e7:ce:0f:65:
                    0b:ec:ce:72:35:4a:48:d7:07:07:29:0f:4d:f9:d9:
                    2f:ae:97:ba:52:ec:c1:ca:81:75:d1:3a:9f:87:0b:
                    20:82:e0:5f:f4:cf:40:d3:ce:ab:c7:37:46:b5:00:
                    51:0e:7f:c1:97:15:f3:14:ee:62:13:05:cd:d5:88:
                    88:4b:f6:20:e2:cb:bf:ee:1c:43:90:f9:d0:60:2d:
                    5c:e1:f1:ca:12:11:8f:02:58:a4:10:3b:a1:dc:53:
                    59:33:b9:a7:90:32:a4:66:3b:45:81:9f:dd:12:2a:
                    25:f3:3c:f9:0e:74:a8:f1:80:ae:7a:c8:f0:c1:6f:
                    ba:8f:d8:fd:a6:a5:b9:f3:a8:92:fd:14:82:84:25:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1E:6C:FC:82:1D:3D:27:CE:7E:9D:0A:51:96:E7:09:6A:42:B0:9D
            X509v3 Authority Key Identifier:
                keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:85:07:99:d9:f2:1e:7d:79:9b:05:d1:1f:7c:47:86:3c:c6:
         f5:0e:b8:db:85:f4:81:7e:7a:94:ba:47:f0:14:f0:21:84:83:
         b1:40:97:8a:de:7b:7a:ec:ff:ed:b6:9d:07:e1:37:f1:32:5d:
         0c:a6:2b:98:bf:fd:30:07:00:a1:2e:76:6d:e9:d7:52:da:60:
         47:f5:79:a8:cd:1d:15:b2:2c:f8:98:d2:47:30:17:60:7f:0a:
         14:77:83:08:71:95:90:ab:26:41:9c:4e:a5:60:c0:72:5e:11:
         e9:e9:dc:b8:92:46:85:e6:a2:4e:20:4b:5f:c7:b3:00:5f:65:
         cc:0e:e1:01:50:1a:69:72:00:41:5e:71:a4:22:8f:9f:58:c2:
         f2:16:92:9b:2b:dd:c7:4c:a9:60:4c:e6:84:1f:97:3d:d5:73:
         a1:c2:5b:68:73:96:e3:eb:3a:a4:be:ba:b3:45:e5:ab:39:62:
         63:e1:23:0b:cc:2f:9c:f4:9a:41:c6:53:37:44:2b:11:28:2f:
         02:cd:52:b2:de:93:35:c4:30:9c:00:20:54:8d:5c:f7:22:5c:
         7f:61:5b:07:ea:5e:95:a3:e6:e1:e1:4b:7d:18:8d:07:76:cc:
         49:7f:dc:0f:26:ed:8c:25:b9:32:09:6d:e8:ec:c1:4a:a7:ab:
         d3:f7:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:18:00 2026 by rpki-client